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ABSTRACT : 

Smart token technology, using a smart card, PCMCIA card or any other medium 
containing storage or processing capability is used to facilitate a variety of 
secure business transactions, including those which might occur over an unsecured 
network such as the Internet. Application programs can obtain a variety of smart 
token services using a common application programming interface. Applications of the 
smart token technology to electronic cash, banking, credit, computer and network 
access, software distribution, medical handling and issuance of credentials are 
presented. 

4 Claims, 29 Drawing figures 
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L2: Entry 3 of 5 File: USPT Aug 24, 1999 



DOCUMENT- IDENTIFIER: US 5943423 A 

TITLE: Smart token system for secure electronic transactions and identification 

Appl i ration Filing Dafp (1) : 
19951215 

Parent Pa.gp Tpyf (1) : 

This application is related to U.S. Pat. No. 5,745,574 in the name of the same 
inventor and entitled SECURITY INFRASTRUCTURE FOR ELECTRONIC TRANSACTIONS, which is 
incorporated herein by reference in its entirety. 

Brief Summary Text (41) : 

The invention is also directed to a method of creating electronic checks for an 
issuer using a smart token of the issuer, by opening a checking application domain 
of a smart token of the issuer, displaying an electronic check form at a user 
workstation, filling in at least amount and payee information on the check form, 
applying a digital signature to the electronic check form, and transferring the 
electronic check form and di gi tal signature to a smart token or computer of an 
issuee. The electronic check form preferably contains at least institution name 
and/or institution number of the institution on which the check is drawn. A copy of 
the electronic check form and/or an electronically signed rprpipt-. from the issuee is 
stored on the smart token of the issuer. 

Brief Summary Text (42): 

The invention is also directed to a method of making credit card purchases using a 
smart token of a credit card holder, by opening a credit card application domain of 
a smart token of the holder, displaying an electronic charge slip, filling in at 
least amount and payee information on the charge slip, applying a digital ri gnabirp 
to the electronic charge slip, and transferring the electronic charge slip and 
digital signature to a smart token or computer of a seller. The electronic charge 
slip contains at least company name and/or company number of the company issuing the 
credit card. A copy of the electronic charge slip and/or an electronically signed 
receipt is stored on the smart token of the issuer. 

Brief Summary Tpyf (44) : 

The invention is also directed to a method of receiving electronic credit for goods 
returned to a seller using a smart token, by opening an application domain used to 
purchase the goods; transferring a copy of an electronic receipt- for the transaction 
by which said goods were purchased to a computer of said seller; determining whether 
a refund will be made by cash, check or credit card credit; opening one of 
electronic cash, checking or credit card application domains of the smart token 
based on the results of the determining step if not already open; storing a refund 
entry in an application domain opened as a result of the determining step; and 
storing a modified receipt in said application domain used to purchase the goods. 
The modified receipt is stored as a new receipt and Mi r rprpipf for the transaction 
by which the goods were purchased is marked as invalid. 

Detailed np.grnpfimi Tpvt- (92) : 

FIG. 13 is a flow chart of a Make. sub.-- Purchase process. The process begins (1300) 
and electronic charge slip with issuer and account name/number filled in is 
displayed (1310) . The user fills in the electronic ID of the seller and the amount 
(1320) and applies a digihai .gignahirp (1330) . The electronic charge slip is 
transferred to the seller's computer (1340) and a copy is stored in the purchase 
area (1350) . An plprt-rnnir rpppipf f electronically signed by the seller is returned, 
optionally, and is stored in the receipt area of the domain. The account unpaid 
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balance is then 




:ased by the amount of the p| 



se (13 70) and the process ends. 



Detailed Dfiffrriphinn Tpvh (94) : 

FIG. 15 is a flow chart of a Receive . sub. -- CC.sub.-- Credit process. The process 
begins (1500) and a copy of a stored receipt from the credit card domain is 
transferred to a seller's computer (1505). The type of refund to be received is 
determined (1510) and one of three branches of the process is taken depending on 
whether the return is cash, credit or check. If it is check, the checking domain is 
open (1515) and the electronic check for the return amount is stored in the area of 
received checks (1520) . If the return is by way of credit memo, an electronically 
signed electronic credit invoice is received from the seller (1525) and stored in 
the returns area of the credit domain (1530) and the account balance for that domain 
is reduced (1535) . If the return received is electronic cash, and the cash domain is 
open (1540) and the cash stored (1595) . After the credited amount is transferred 
back to the user, the user will receive a signed, modified receipt from the seller 
comprising a copy of the original receipt with the return information appended 
(1550) . The modified receipt: is stored in the receipts area of the domain where the 
transaction originated (1555) and the old receipt is marked as invalid in view of 
the modified receipt (1560) and the process ends. 
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L2: Entry 1 of 5 File: USPT Feb 6, 2001 



DOCUMENT- IDENTIFIER: US 6185683 Bl 
** See image for Certificate of Correction ** 

TITLE: Trusted and secure techniques, systems and methods for item delivery and 
execution 



Appl n rat-ion Filing n^hP (l) : 

Detailed Desrri phi on Tpvh (261) : 
The routing slip 4072 (see FIG. 103) associated with the document (s) in the 
container may be integrated with control information 4078 reflecting chain of 
handling and control relationships among recipients. For example, the control 
information 4078 associated with the item(s) 4054 may be correlated with fields of 
the routing slip 4072. Successful completion of a rp.rpipi- ma y qualify a specific 
user to become eligible to use a subset of the control information 4078 that permits 
them to make changes in a portion of the item, and describe their own control 
information for the changes, so long as this control information does not provide 
further recipients with the right to modify the new material. The control 
information 4078 may further specify that no changes may be made to an item 4054 
until one or more specified recipients has read the item, and (through use of 
reciprocal controls as show in FIGS. 41a-41d for example) indicated their approval 
of further changes. 

Detailed Desrrri pt -i on Tpvt- (280) : 

As mentioned above, audit information 4077 associated with use of a document may be 
transmitted to many different parties. Audit information 4077 may also be treated as 
part of the signaling methodology described for reciprocal methods (see FIGS. 
41a-14d) to provide receipts. For example, copies of receipts may be delivered to 
the sender, as described above, as well as to the sender's manager in a corporate 
setting, or to the sender's legal counsel or other professional advisors (such as 
tax advisers, accountants, physicians, etc.) Some items 4054 which are delivered to, 
or used by, recipients to gather information (such as tax forms, purchase orders, 
sales reports, and insurance claims) may require delivery of receipts to several 
parties other than the sender. Some transactions may require the delivery of such 
receipts before completion. For example, a sales report requesting delivery of 
products from a company's inventory may require that a receipt from the reading of a 
document delivered to the sales organization be received by the accounting 
department for audit purposes before permitting receipt of the document by the sales 
organization . 

Detailed Description T^vt (467) : 

In this example, trusted go-between 4700 may receive electronic notifications in 
secure containers 302 as each step in the overall process is completed. As 
illustrated in FIG. A3 A, trusted go-between 4700 can electronically check each 
completed condition off of its electronically-maintained condition list as it 
receives such even notifications. Trusted go-between 4700 maintains this el Prfrnni n 
list 4704 in a secure, validated and authenticated manner using system 
4050- -requiring, for example, receipt of plp^rnmV containers having event 
notifications that are signed cryptographically with one or more digital signafnrp.g 
from the appropriate parties. In this way, trusted go-between 4700 can maintain a 
highly reliable and validated, authenticated audit of the transaction steps as the 
overall transaction proceeds. 

Detailed npsr Hphinn Tpvh (492) : 

FIG. 132 shows how system 4050 might be used by Patent Office automation. In this 
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example, an Inv^^B 5060 might file her patent ^^B. cat ion 5062 by sending it to 

the Patent Offi<^BP)64 in one or more secure eleoHRiic containers 302 (1). The high 
degree of trustedness, confidentiality and security provided in accordance with 
these inventions ensure that the patent application 5062 will arrive at the Patent 
Office 5064, and will not be disclosed to or accessed by anyone other than the 
Patent Office. 

Detailed DfisrHphinn Tpyf (494) : 

Trusted go-between 4700 could automatically issue the inv^ni-n-r 5060 a filing receipt 
based upon secure receipt of the patent application 5062 using the return receipt 
techniques described above. Trusted go-between 4700 could then deposit the patent 
application 5062 into a secure electronic archive 4702 to await examination. Trusted 
go-between 4700 could include appropriate routing information based on a routing 
slip as described above to route the patent application 5062 to the appropriate 
group and/or patent examiner 5064 within the Patent Office 5064. 

Detailed npsrHpt-inn TPYf (496) : 

The patent examiner 5064 could also use electronic appliance 600 1 to draft office 
actions and notices. The examiner 5064 could communicate these notices and actions 
via trusted go-between 4700 to the -invpni-nT- 5060. Trusted go-between 4700 could 
maintain copies of the examiner's actions and notices within secure electronic 
archive 4702 --ensuring their confidentiality and also making sure they do not become 
lost. System 4050 could provide a return receipt when the -invpni-n-r 5060 opened the 
electronic container 302 containing the examiner's actions or notices- -thus proving 
in a highly reliable and trusted fashion that the -i nvpnfnr had in fact received what 
the examiner sent. Similarly, inventor 5060 could file responses (and could even 
teleconference with the examiner 5064) via electronic appliance 600. The high degree 
of trustedness and confidentiality provided by system 4050 along with the return 
receipt and other options discussed above provide a highly reliable, confidential 
communications means that can be used to demonstrate when items were actually filed. 



DetailRd DfiflrtT-i pi- -i on Tpvh (497) : 

Once the examiner- -after conducting a lengthy prior art search and carefully 
analyzing the patent application 5062 to ensure that the invention is patentable --is 
fully and completely satisfied that the i nvpnhnr 5060 is entitled to a patent, the 
examiner 5064 could instruct the trusted go-between 4700 to grant the application as 
a patent. Trusted go-between 4700 could retrieve a copy of the application 5062 from 
the secure electronic archive 4702, use automatic means to transform it into an 
issued patent, and insert a seal 4200 (for example, bearing the digital certificate 
of the Patent Office 5064) onto the document. The trusted go-between 4700 could then 
issue the granted patent 5066 to the_im£nJLar 5060 by sending it in a secure 
electronic container 302 (3) --thus ensuring that it does not get lost and is in fact 
received by the invpnt-.nr . 

Detailed DftRfiHpf -inn Tpvt- (499) : 

The FIG. 132 example also provides a convenient mechanism for registering invention 
disclosure documents with the patent office or other organization. For example, 
i nventor 5060 could use electronic appliance 600 to file an invention disclosure 
document with the trusted go-between 4700. Trusted go-between 4700 would notarize or 
witness receipt of the document upon receipt by embedding the document with a 
digital signature specifying the trusted go-between's identity, the current time and 
date, and a hash value for use in an integrity check. Trusted go-between 4700 could 
then file the invention disclosure document within secure electronic archive 4702. 
At a later date, inventor 5062 could prove the invention disclosure document had 
been created as of a certain date by requesting trusted go-between 4 700 to produce a 
copy of the invention disclosure document from secure electronic archive 4702 . 
Trusted go-between 4700 would thus provide a secure, trusted independent 
corroboration of document creation- -since it could demonstrate (based upon its 
imprinted digital signature) that it had received the document on a certain date and 
that the document had a certain contents. 

DRt-a-Mgrf Dfiflr-riph-inn TPYh (500) : 

The disclosure service could also simply send the invpnt.nr a signed hash value, and 
then discard the document; since the hash value could be used with a copy preserved 
by the inventor. The service could archive the signed hash value themselves as well 
(although that is not required) . 
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File: USPT 



Jul 11, 2000 



DOCUMENT- IDENTIFIER: US 6085976 A 

TITLE: Travel system and methods utilizing mult i -application passenger cards 

Appl-i nation Filing Hahp (1) : 
19980.522 

Br-ifif Summary TPYh ( 12 ) : 

The improved quality of service- -when using the computerized card- -is the result of 
achieving faster boarding or improved throughput at the point -of -service location, 
more service or product selections to choose from, up-to-date information available 
for micromarketing and inventory or money management purposes, and services 
renderable from remote locations. In addition, there is the convenience of using the 
same passenger card for transportation, identification, card-based payment means, 
and for other travel -related applications and services. This convenience factor will 
translate into an enhanced goodwill for the card issuer and acceptors as well. 

Dfit-.a-M fid np.grHptinn Tfiyt- (93) : 

To select the return- trip airline ticket, the cardholder will input, or point and 
click onto the map, the date(s) and location (s) of departure /arrival , as well as the 
number and type of tickets needed. In response thereto, the map compiles and 
provides a set of possible airlines and alternative itineraries, including the 
ticket price and the departure and arrival times associated with the individual 
airlines and alternative routes. Should the flight require any connections, the map 
will make additional recommendations and provide the necessary information, 
including the type of carriers and time and location of transfer. The map also 
displays any in-flight or other services available in connection with a particular 
airline ticket. The cardholder now selects a particular airline for the planned 
flight segment. The map will retrieve the airplane's seating guide while displaying 
the floor plan including the status of seats that are still available on that 
flight. Once a particular seating arrangement is selected by the cardholder, the map 
will display the required payment for that seat. The cardholder will pay for the 
ticket via the card-based credit card form and the map will update the airplane's 
seating map accordingly, as well as issue an plpp trnm'r rfinpipt- for the payment 
received. The cardholder can also select a particular service, such as the serving 
of a special meal or the accumulation of frequent mileage points, which is provided 
by the airliner. The selected seat assignment/ service, including the related 
application codes and other information, can now be stored in the passenger card, as 
well communicated with the airliner's database. If applicable, the airliner can also 

attach its digital signature to the card-based ticket/service to guarantee the 

authenticity thereof. The ticket-related information can also be provided as a 
hardcopy or imprinted onto the card package. 
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